$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/3a019076-b464-3583-90a4-8ee571e8d49f.roa File: 3a019076-b464-3583-90a4-8ee571e8d49f.roa (raw, json) Hash identifier: cEvrHc7esJ8xSOdx4iHgSxjxm5eNfHBVWExL37jpKjk= Subject key identifier: F8:8D:97:36:FE:4E:95:F4:10:82:1E:3F:99:72:A9:13:72:21:EB:37 Certificate issuer: /CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd Certificate serial: 010D0C9F43285849350EAED0B6E7921E6FF8AA40 Authority key identifier: 0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/3a019076-b464-3583-90a4-8ee571e8d49f.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 393474 IP address blocks: 64.90.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:ae:d0:b6:e7:92:1e:6f:f8:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=5a4194f0-ae01-4686-b145-26725b5373ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3e:ea:07:70:e1:ad:21:17:bc:ae:f7:de:04: b7:69:da:36:f6:4e:38:75:df:dd:de:23:5f:6f:a9: 7f:dc:c0:e0:56:c9:b6:ec:6c:5c:01:eb:a4:62:3b: bf:19:92:79:42:35:3c:af:fd:41:18:06:0a:01:38: aa:02:6b:0e:18:c5:54:1b:ae:0d:1f:3c:22:10:90: ec:3f:89:a1:40:5c:8c:e1:f4:5f:eb:7e:ba:53:46: 30:b1:a2:45:6e:a6:4a:fa:d7:dc:56:d9:f8:bd:31: cc:77:bc:37:48:0a:a0:cb:fc:a9:16:6c:59:a4:dc: 5c:e3:f2:f3:44:d5:12:7e:21:e0:d7:cb:d0:fa:80: a6:0e:2d:70:23:ce:51:bf:57:73:ab:6e:02:69:7f: 43:78:66:fc:9f:5a:84:ae:23:a6:63:0b:e8:fa:38: 38:6e:96:52:e1:af:5a:a7:e1:d3:13:42:73:ff:78: 71:39:4d:8b:62:57:e6:07:0b:55:ac:80:21:61:20: 92:b3:0b:e2:36:69:ae:5b:e5:45:90:65:6c:c2:2b: c5:aa:fd:ec:c7:cc:0c:dd:67:36:75:cd:3e:95:a3: 12:1d:4b:ae:ac:55:9c:ec:fe:bb:43:22:e1:43:85: b4:72:62:38:fd:6e:21:1c:7c:2d:69:e8:99:0f:d8: 1e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:8D:97:36:FE:4E:95:F4:10:82:1E:3F:99:72:A9:13:72:21:EB:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/3a019076-b464-3583-90a4-8ee571e8d49f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl X509v3 Authority Key Identifier: keyid:0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer sbgp-ipAddrBlock: critical IPv4: 64.90.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:c3:77:65:50:1e:cc:05:ca:16:c1:ac:a0:5e:2a:a4:2d:1b: 8b:34:2d:fe:ec:5a:52:0e:a1:36:c4:99:04:f4:59:85:52:37: 2f:93:11:41:71:bf:2f:f3:15:0e:8d:f3:72:34:20:62:0d:b6: 31:d9:7e:c4:82:33:fd:72:ef:90:72:52:e6:06:30:9a:7a:6f: b0:0d:fc:d2:f4:5a:c9:a9:23:15:b8:65:37:d7:c9:22:a8:a1: ef:b9:8b:90:38:84:46:ff:5c:96:c3:bb:94:6a:db:bf:10:05: c3:09:ca:b2:8b:89:3b:a1:4b:f5:d3:35:bd:a7:42:d1:ba:f7: 64:10:50:7f:fe:e7:c6:98:d3:06:d3:a4:33:2f:c8:11:ce:61: fe:15:f8:81:40:0e:df:85:f8:91:27:b2:ea:0e:14:15:9e:7e: 84:4e:f1:bc:1e:b0:6b:61:5d:ce:b0:25:94:f6:d7:c6:fa:a1: 79:5a:f5:2d:4d:e4:e9:ca:de:10:5b:24:e7:15:ec:6f:fb:a8: 87:3c:cd:45:d4:bd:bd:37:88:30:f8:63:68:92:af:a8:1d:da: 3f:82:7a:81:c5:67:f7:7e:a5:f1:18:cb:df:7c:66:3b:12:97: 75:87:4d:11:3f:bf:0b:ff:00:1b:eb:20:2d:c1:4a:87:c8:b7: ba:e2:0c:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1Dq7QtueSHm/4qkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwMmRjOWMtMTJlOS00YjY2LThjNmQtZTI5OTRhMjFh MWJkMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk NWE0MTk0ZjAtYWUwMS00Njg2LWIxNDUtMjY3MjViNTM3M2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT7qB3DhrSEXvK733gS3ado29k44dd/d3iNf b6l/3MDgVsm27GxcAeukYju/GZJ5QjU8r/1BGAYKATiqAmsOGMVUG64NHzwiEJDs P4mhQFyM4fRf6366U0YwsaJFbqZK+tfcVtn4vTHMd7w3SAqgy/ypFmxZpNxc4/Lz RNUSfiHg18vQ+oCmDi1wI85Rv1dzq24CaX9DeGb8n1qEriOmYwvo+jg4bpZS4a9a p+HTE0Jz/3hxOU2LYlfmBwtVrIAhYSCSswviNmmuW+VFkGVswivFqv3sx8wM3Wc2 dc0+laMSHUuurFWc7P67QyLhQ4W0cmI4/W4hHHwtaeiZD9geuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPiNlzb+TpX0EIIeP5lyqRNyIes3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAy ZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5NGEyMWExYmQvM2EwMTkwNzYtYjQ2NC0z NTgzLTkwYTQtOGVlNTcxZThkNDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTMwMmRjOWMtMTJlOS00YjY2LThj NmQtZTI5OTRhMjFhMWJkL2EzMDJkYzljLTEyZTktNGI2Ni04YzZkLWUyOTk0YTIx YTFiZC5jcmwwHwYDVR0jBBgwFoAUD9wvbjNkX+N70ljHXoRo2VwdIpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAyZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5 NGEyMWExYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFqFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7Dd2VQHswFyhbBrKBeKqQtG4s0Lf7sWlIOoTbEmQT0WYVSNy+TEUFx vy/zFQ6N83I0IGINtjHZfsSCM/1y75ByUuYGMJp6b7AN/NL0WsmpIxW4ZTfXySKo oe+5i5A4hEb/XJbDu5Rq278QBcMJyrKLiTuhS/XTNb2nQtG692QQUH/+58aY0wbT pDMvyBHOYf4V+IFADt+F+JEnsuoOFBWefoRO8bwesGthXc6wJZT218b6oXla9S1N 5OnK3hBbJOcV7G/7qIc8zUXUvb03iDD4Y2iSr6gd2j+CeoHFZ/d+pfEYy998ZjsS l3WHTRE/vwv/ABvrIC3BSofIt7riDKM= -----END CERTIFICATE-----Generated at Mon Apr 28 01:01:01 2025 by rpki-client